filenametray-av.exe
size1098752 (0x10c400)
md55b0d9930b0437502ca30a8a6879dafbb
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x120

Rich Header

lib idversiontimes used
2414011619
24340116140
2424011623
259241238
2612412340
2602412320
131307296
135307291
1473072927
10462
259242102
2652421542
255242101
258242151

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0x5a7f9e74
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x23
Magic0x20b
LinkerVersion14.0
SizeOfCode0xc2e00
SizeOfInitializedData0x49200
SizeOfUninitializedData0
AddressOfEntryPoint0xa55a8
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x119000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x20
SizeOfStackReserve0x400000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xc2cac0xc2e00R-X CODE
.rdata0xc40000x389480x38a00R-- IDATA
.data0xfd0000xbe140x3800RW- IDATA
.pdata0x1090000x70740x7200R-- IDATA
.gfids0x1110000xec0x200R-- IDATA
.tls0x11200090x200RW- IDATA
.rsrc0x1130000x591c0x5a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xf9b040x118
RESOURCE0x1130000x591c
EXCEPTION0x1090000x7074
SECURITY00
BASERELOC00
DEBUG0xef5000x38
ARCHITECTURE00
GLOBALPTR00
TLS0xef5d80x28
LOAD_CONFIG0xef5400x94
Bound_IAT00
IAT0xc40000xe68
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1401120000x1401120080x1401008780x1400c4f4000x300000
typenamesizecp
ICON#142641252
ICON#296401252
ICON#311281252
ICON#411281252
ICON#511281252
ICON#611281252
ICON#72961252
MENU#2117121252
DIALOG#2052321252
ACCELERATORS#212721252
RCDATA>AUTOHOTKEY SCRIPT<1731252
GROUP_ICON#159481252
GROUP_ICON#160201252
GROUP_ICON#206201252
GROUP_ICON#207201252
GROUP_ICON#208201252
VERSION#15081252
MANIFEST#111591252
module_namehintordfunction_name
WSOCK32.dll116
WSOCK32.dll11
WSOCK32.dll52
WSOCK32.dll57
WSOCK32.dll115
WINMM.dll103mixerSetControlDetails
WINMM.dll168waveOutGetVolume
WINMM.dll22joyGetPosEx
WINMM.dll92mixerGetControlDetailsW
WINMM.dll102mixerOpen
WINMM.dll94mixerGetDevCapsW
WINMM.dll97mixerGetLineControlsW
WINMM.dll177waveOutSetVolume
WINMM.dll90mixerClose
WINMM.dll44mciSendStringW
WINMM.dll19joyGetDevCapsW
WINMM.dll99mixerGetLineInfoW
VERSION.dll14VerQueryValueW
VERSION.dll6GetFileVersionInfoW
VERSION.dll5GetFileVersionInfoSizeW
COMCTL32.dll84ImageList_Create
COMCTL32.dll12CreateStatusWindowW
COMCTL32.dll112ImageList_ReplaceIcon
COMCTL32.dll100ImageList_GetIconSize
COMCTL32.dll85ImageList_Destroy
COMCTL32.dll80ImageList_AddMasked
PSAPI.DLL16GetModuleFileNameExW
PSAPI.DLL20GetProcessImageFileNameW
PSAPI.DLL14GetModuleBaseNameW
KERNEL32.dll854LockResource
KERNEL32.dll319FindFirstFileW
KERNEL32.dll331FindNextFileW
KERNEL32.dll308FindClose
KERNEL32.dll298FileTimeToLocalFileTime
KERNEL32.dll1125SetEnvironmentVariableW
KERNEL32.dll54Beep
KERNEL32.dll869MoveFileW
KERNEL32.dll908OutputDebugStringW
KERNEL32.dll168CreateProcessW
KERNEL32.dll497GetFileAttributesW
KERNEL32.dll1312WideCharToMultiByte
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll486GetExitCodeProcess
KERNEL32.dll1341WriteProcessMemory
KERNEL32.dll966ReadProcessMemory
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll898OpenProcess
KERNEL32.dll1230TerminateProcess
KERNEL32.dll1162SetPriorityClass
KERNEL32.dll1152SetLastError
KERNEL32.dll483GetEnvironmentVariableW
KERNEL32.dll521GetLocalTime
KERNEL32.dll463GetDateFormatW
KERNEL32.dll670GetTimeFormatW
KERNEL32.dll470GetDiskFreeSpaceW
KERNEL32.dll1207SetVolumeLabelW
KERNEL32.dll143CreateFileW
KERNEL32.dll225DeviceIoControl
KERNEL32.dll474GetDriveTypeW
KERNEL32.dll687GetVolumeInformationW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll963ReadFile
KERNEL32.dll1332WriteFile
KERNEL32.dll215DeleteFileW
KERNEL32.dll1135SetFileAttributesW
KERNEL32.dll840LocalFileTimeToFileTime
KERNEL32.dll1144SetFileTime
KERNEL32.dll504GetFileSizeEx
KERNEL32.dll638GetSystemTime
KERNEL32.dll629GetSystemDefaultUILanguage
KERNEL32.dll405GetComputerNameW
KERNEL32.dll695GetWindowsDirectoryW
KERNEL32.dll652GetTempPathW
KERNEL32.dll514GetFullPathNameW
KERNEL32.dll616GetShortPathNameW
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll827LeaveCriticalSection
KERNEL32.dll1278VirtualProtect
KERNEL32.dll835LoadResource
KERNEL32.dll100CompareStringW
KERNEL32.dll1030RemoveDirectoryW
KERNEL32.dll117CopyFileW
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll356FormatMessageW
KERNEL32.dll585GetPrivateProfileStringW
KERNEL32.dll583GetPrivateProfileSectionW
KERNEL32.dll582GetPrivateProfileSectionNamesW
KERNEL32.dll1338WritePrivateProfileStringW
KERNEL32.dll1336WritePrivateProfileSectionW
KERNEL32.dll1121SetEndOfFile
KERNEL32.dll366GetACP
KERNEL32.dll506GetFileType
KERNEL32.dll619GetStdHandle
KERNEL32.dll1141SetFilePointerEx
KERNEL32.dll1227SystemTimeToFileTime
KERNEL32.dll299FileTimeToSystemTime
KERNEL32.dll503GetFileSize
KERNEL32.dll784IsWow64Process
KERNEL32.dll1273VirtualAllocEx
KERNEL32.dll1276VirtualFreeEx
KERNEL32.dll263EnumResourceNamesW
KERNEL32.dll832LoadLibraryExW
KERNEL32.dll714GlobalSize
KERNEL32.dll1237TlsGetValue
KERNEL32.dll1235TlsAlloc
KERNEL32.dll747InitializeCriticalSectionAndSpinCount
KERNEL32.dll1061RtlUnwindEx
KERNEL32.dll948RaiseException
KERNEL32.dll238EncodePointer
KERNEL32.dll1057RtlPcToFileHeader
KERNEL32.dll751InitializeSListHead
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll774IsProcessorFeaturePresent
KERNEL32.dll618GetStartupInfoW
KERNEL32.dll1203SetUnhandledExceptionFilter
KERNEL32.dll1250UnhandledExceptionFilter
KERNEL32.dll770IsDebuggerPresent
KERNEL32.dll1062RtlVirtualUnwind
KERNEL32.dll1055RtlLookupFunctionEntry
KERNEL32.dll1048RtlCaptureContext
KERNEL32.dll133CreateEventW
KERNEL32.dll1289WaitForSingleObjectEx
KERNEL32.dll1042ResetEvent
KERNEL32.dll1127SetEvent
KERNEL32.dll397GetCommandLineW
KERNEL32.dll287ExitProcess
KERNEL32.dll541GetModuleHandleExW
KERNEL32.dll732HeapSize
KERNEL32.dll730HeapReAlloc
KERNEL32.dll729HeapQueryInformation
KERNEL32.dll727HeapFree
KERNEL32.dll723HeapAlloc
KERNEL32.dll1215SizeofResource
KERNEL32.dll340FindResourceW
KERNEL32.dll640GetSystemTimeAsFileTime
KERNEL32.dll538GetModuleFileNameW
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll376GetCPInfo
KERNEL32.dll684GetVersionExW
KERNEL32.dll360FreeLibrary
KERNEL32.dll833LoadLibraryW
KERNEL32.dll542GetModuleHandleW
KERNEL32.dll588GetProcAddress
KERNEL32.dll520GetLastError
KERNEL32.dll158CreateMutexW
KERNEL32.dll82CloseHandle
KERNEL32.dll487GetExitCodeThread
KERNEL32.dll1190SetThreadPriority
KERNEL32.dll180CreateThread
KERNEL32.dll623GetStringTypeExW
KERNEL32.dll1368lstrcmpiW
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll717GlobalUnlock
KERNEL32.dll706GlobalFree
KERNEL32.dll699GlobalAlloc
KERNEL32.dll710GlobalLock
KERNEL32.dll453GetCurrentDirectoryW
KERNEL32.dll1126SetErrorMode
KERNEL32.dll746InitializeCriticalSection
KERNEL32.dll1115SetCurrentDirectoryW
KERNEL32.dll1216Sleep
KERNEL32.dll666GetTickCount
KERNEL32.dll872MulDiv
KERNEL32.dll1238TlsSetValue
KERNEL32.dll1236TlsFree
KERNEL32.dll815LCMapStringW
KERNEL32.dll624GetStringTypeW
KERNEL32.dll416GetConsoleCP
KERNEL32.dll434GetConsoleMode
KERNEL32.dll593GetProcessHeap
KERNEL32.dll314FindFirstFileExW
KERNEL32.dll780IsValidCodePage
KERNEL32.dll396GetCommandLineA
KERNEL32.dll574GetOEMCP
KERNEL32.dll481GetEnvironmentStringsW
KERNEL32.dll359FreeEnvironmentStringsW
KERNEL32.dll1172SetStdHandle
KERNEL32.dll349FlushFileBuffers
KERNEL32.dll1331WriteConsoleW
KERNEL32.dll930QueryDosDeviceW
KERNEL32.dll961ReadConsoleW
USER32.dll525MapWindowPoints
USER32.dll590RedrawWindow
USER32.dll715SetWindowLongPtrW
USER32.dll684SetParent
USER32.dll269GetClassInfoExW
USER32.dll260GetAncestor
USER32.dll793UpdateWindow
USER32.dll349GetMessagePos
USER32.dll273GetClassLongPtrW
USER32.dll149DefDlgProcW
USER32.dll30CallWindowProcW
USER32.dll65CheckRadioButton
USER32.dll449IntersectRect
USER32.dll393GetUpdateRect
USER32.dll580PtInRect
USER32.dll97CreateDialogIndirectParamW
USER32.dll409GetWindowLongPtrW
USER32.dll88CreateAcceleratorTableW
USER32.dll160DestroyAcceleratorTable
USER32.dll445InsertMenuItemW
USER32.dll676SetMenuDefaultItem
USER32.dll619RemoveMenu
USER32.dll680SetMenuItemInfoW
USER32.dll470IsMenu
USER32.dll342GetMenuItemInfoW
USER32.dll106CreateMenu
USER32.dll107CreatePopupMenu
USER32.dll677SetMenuInfo
USER32.dll10AppendMenuW
USER32.dll164DestroyMenu
USER32.dll767TrackPopupMenuEx
USER32.dll293GetDesktopWindow
USER32.dll84CopyImage
USER32.dll103CreateIconIndirect
USER32.dll102CreateIconFromResourceEx
USER32.dll224EnumClipboardFormats
USER32.dll400GetWindow
USER32.dll16BringWindowToTop
USER32.dll391GetTopWindow
USER32.dll366GetQueueStatus
USER32.dll416GetWindowRect
USER32.dll278GetClientRect
USER32.dll756SystemParametersInfoW
USER32.dll3AdjustWindowRectEx
USER32.dll208DrawTextW
USER32.dll692SetRect
USER32.dll309GetIconInfo
USER32.dll723SetWindowTextW
USER32.dll621RemovePropW
USER32.dll63CheckMenuItem
USER32.dll499LoadImageW
USER32.dll34ChangeClipboardChain
USER32.dll653SetClipboardViewer
USER32.dll489LoadAcceleratorsW
USER32.dll214EnableMenuItem
USER32.dll333GetMenu
USER32.dll110CreateWindowExW
USER32.dll593RegisterClassExW
USER32.dll495LoadCursorW
USER32.dll163DestroyIcon
USER32.dll166DestroyWindow
USER32.dll456IsCharAlphaW
USER32.dll524MapVirtualKeyW
USER32.dll529MessageBeep
USER32.dll523MapVirtualKeyExW
USER32.dll323GetKeyboardLayoutNameW
USER32.dllActivateKeyboardLayout
USER32.dll304GetGUIThreadInfo
USER32.dll423GetWindowTextW
USER32.dll825mouse_event
USER32.dll820WindowFromPoint
USER32.dll384GetSystemMetrics
USER32.dll824keybd_event
USER32.dll668SetKeyboardState
USER32.dll324GetKeyboardState
USER32.dll290GetCursorPos
USER32.dll263GetAsyncKeyState
USER32.dll12AttachThreadInput
USER32.dll634SendInput
USER32.dll784UnregisterHotKey
USER32.dll602RegisterHotKey
USER32.dll571PostQuitMessage
USER32.dll639SendMessageTimeoutW
USER32.dll776UnhookWindowsHookEx
USER32.dll727SetWindowsHookExW
USER32.dll573PostThreadMessageW
USER32.dll455IsCharAlphaNumericW
USER32.dll460IsCharUpperW
USER32.dll458IsCharLowerW
USER32.dll764ToUnicodeEx
USER32.dll320GetKeyboardLayout
USER32.dll28CallNextHookEx
USER32.dll46CharLowerW
USER32.dll617ReleaseDC
USER32.dll291GetDC
USER32.dll554OpenClipboard
USER32.dll280GetClipboardData
USER32.dll282GetClipboardFormatNameW
USER32.dll691SetPropW
USER32.dll365GetPropW
USER32.dll251FlashWindow
USER32.dll674SetMenu
USER32.dll245ExitWindowsEx
USER32.dll346GetMenuStringW
USER32.dll380GetSubMenu
USER32.dll340GetMenuItemID
USER32.dll339GetMenuItemCount
USER32.dll383GetSystemMenu
USER32.dll327GetLastInputInfo
USER32.dll287GetCursor
USER32.dll484IsWindowVisible
USER32.dll71ClientToScreen
USER32.dll73CloseClipboard
USER32.dll652SetClipboardData
USER32.dll213EmptyClipboard
USER32.dll570PostMessageW
USER32.dll250FindWindowW
USER32.dll218EndDialog
USER32.dll479IsWindow
USER32.dll175DispatchMessageW
USER32.dll772TranslateMessage
USER32.dll743ShowWindow
USER32.dll662SetDlgItemTextW
USER32.dll297GetDlgItem
USER32.dll631SendDlgItemMessageW
USER32.dll172DialogBoxParamW
USER32.dll665SetForegroundWindow
USER32.dll156DefWindowProcW
USER32.dll246FillRect
USER32.dll200DrawIconEx
USER32.dll382GetSysColorBrush
USER32.dll381GetSysColor
USER32.dll615RegisterWindowMessageW
USER32.dll469IsIconic
USER32.dll486IsZoomed
USER32.dll242EnumWindows
USER32.dll422GetWindowTextLengthW
USER32.dll216EnableWindow
USER32.dll450InvalidateRect
USER32.dll670SetLayeredWindowAttributes
USER32.dll718SetWindowPos
USER32.dll719SetWindowRgn
USER32.dll664SetFocus
USER32.dll86CountClipboardFormats
USER32.dll716SetWindowLongW
USER32.dll625ScreenToClient
USER32.dll465IsDialogMessageW
USER32.dll640SendMessageW
USER32.dll480IsWindowEnabled
USER32.dll410GetWindowLongW
USER32.dll319GetKeyState
USER32.dll770TranslateAcceleratorW
USER32.dll487KillTimer
USER32.dll567PeekMessageW
USER32.dll302GetFocus
USER32.dll276GetClassNameW
USER32.dll424GetWindowThreadProcessId
USER32.dll303GetForegroundWindow
USER32.dll351GetMessageW
USER32.dll705SetTimer
USER32.dll358GetParent
USER32.dll296GetDlgCtrlID
USER32.dll60CharUpperW
USER32.dll462IsClipboardFormatAvailable
USER32.dll643SetActiveWindow
USER32.dll223EnumChildWindows
USER32.dll808VkKeyScanExW
USER32.dll543MoveWindow
USER32.dll537MessageBoxW
GDI32.dll516GetPixel
GDI32.dll449GetClipRgn
GDI32.dll437GetCharABCWidthsW
GDI32.dll639SetBkMode
GDI32.dll74CreatePatternBrush
GDI32.dll642SetBrushOrgEx
GDI32.dll293EnumFontFamiliesExW
GDI32.dll53CreateDIBSection
GDI32.dll373GdiFlush
GDI32.dll638SetBkColor
GDI32.dll305ExcludeClipRect
GDI32.dll678SetTextColor
GDI32.dll448GetClipBox
GDI32.dll19BitBlt
GDI32.dll47CreateCompatibleBitmap
GDI32.dll530GetSystemPaletteEntries
GDI32.dll458GetDIBits
GDI32.dll48CreateCompatibleDC
GDI32.dll78CreatePolygonRgn
GDI32.dll79CreateRectRgn
GDI32.dll81CreateRoundRectRgn
GDI32.dll56CreateEllipticRgn
GDI32.dll227DeleteDC
GDI32.dll509GetObjectW
GDI32.dll550GetTextMetricsW
GDI32.dll548GetTextFaceW
GDI32.dll631SelectObject
GDI32.dll525GetStockObject
GDI32.dll50CreateDCW
GDI32.dll84CreateSolidBrush
GDI32.dll65CreateFontW
GDI32.dll322FillRgn
GDI32.dll459GetDeviceCaps
GDI32.dll230DeleteObject
COMDLG32.dll4CommDlgExtendedError
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll12GetOpenFileNameW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll768UnlockServiceDatabase
ADVAPI32.dll392LockServiceDatabase
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll357GetUserNameW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll564RegConnectRegistryW
ADVAPI32.dll584RegDeleteValueW
SHELL32.dll32DragQueryPoint
SHELL32.dll165SHEmptyRecycleBinW
SHELL32.dll172SHFileOperationW
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll207SHGetMalloc
SHELL32.dll195SHGetFolderPathW
SHELL32.dll289ShellExecuteExW
SHELL32.dll302Shell_NotifyIconW
SHELL32.dll27DragFinish
SHELL32.dll31DragQueryFileW
SHELL32.dll43ExtractIconW
ole32.dll358OleInitialize
ole32.dll381OleUninitialize
ole32.dll20CoCreateInstance
ole32.dll66CoInitialize
ole32.dll112CoUninitialize
ole32.dll12CLSIDFromString
ole32.dll57CoGetObject
ole32.dll437StringFromGUID2
ole32.dll138CreateStreamOnHGlobal
OLEAUT32.dll20
OLEAUT32.dll35
OLEAUT32.dll7
OLEAUT32.dll418
OLEAUT32.dll24
OLEAUT32.dll18
OLEAUT32.dll23
OLEAUT32.dll22
OLEAUT32.dll148
OLEAUT32.dll21
OLEAUT32.dll17
OLEAUT32.dll16
OLEAUT32.dll19
OLEAUT32.dll11
OLEAUT32.dll27
OLEAUT32.dll2
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll15
OLEAUT32.dll6

StringTable 040904b0

FileDescription
FileVersion1.1.28.00
InternalName
LegalCopyright
OriginalFilename
ProductName
ProductVersion1.1.28.00

VS_FIXEDFILEINFO

FileVersion1.1.28.0
ProductVersion1.1.28.0
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d01093168BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x100878